{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T04:30:40Z","timestamp":1773117040145,"version":"3.50.1"},"reference-count":45,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2012,1,16]],"date-time":"2012-01-16T00:00:00Z","timestamp":1326672000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGCOMM Comput. Commun. Rev."],"published-print":{"date-parts":[[2012,1,16]]},"abstract":"<jats:p>Unsolicited one-way Internet traffic, also called Internet background radiation (IBR), has been used for years to study malicious activity on the Internet, including worms, DoS attacks, and scanning address space looking for vulnerabilities to exploit. We show how such traffic can also be used to analyze macroscopic Internet events that are unrelated to malware. We examine two phenomena: country-level censorship of Internet communications described in recent work, and natural disasters (two recent earthquakes). We introduce a new metric of local IBR activity based on the number of unique IP addresses per hour contributing to IBR. The advantage of this metric is that it is not affected by bursts of traffic from a few hosts. Although we have only scratched the surface, we are convinced that IBR traffic is an important building block for comprehensive monitoring, analysis, and possibly even detection of events unrelated to the IBR itself. In particular, IBR offers the opportunity to monitor the impact of events such as natural disasters on network infrastructure, and in particular reveals a view of events that is complementary to many existing measurement platforms based on (BGP) control-plane views or targeted active ICMP probing.<\/jats:p>","DOI":"10.1145\/2096149.2096154","type":"journal-article","created":{"date-parts":[[2012,1,17]],"date-time":"2012-01-17T17:21:44Z","timestamp":1326820904000},"page":"31-39","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":31,"title":["Extracting benefit from harm"],"prefix":"10.1145","volume":"42","author":[{"given":"Alberto","family":"Dainotti","sequence":"first","affiliation":[{"name":"University of Napoli Federico II, Napoli, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Roman","family":"Amman","sequence":"additional","affiliation":[{"name":"Auckland University of Technology, Auckland, New Zealand"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Emile","family":"Aben","sequence":"additional","affiliation":[{"name":"RIPE NCC, Amsterdam, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kimberly C.","family":"Claffy","sequence":"additional","affiliation":[{"name":"CAIDA\/UCSD, San Diego, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,1,16]]},"reference":[{"key":"e_1_2_2_1_1","unstructured":"AfriNIC. http:\/\/www.afrinic.net.  AfriNIC. http:\/\/www.afrinic.net."},{"key":"e_1_2_2_2_1","unstructured":"E. Aben. Unsolicited Internet Traffic from Libya. http:\/\/labs.ripe.net\/Members\/emileaben\/unsolicited-internet-traffic-from-libya March 23 2011.  E. Aben. Unsolicited Internet Traffic from Libya. http:\/\/labs.ripe.net\/Members\/emileaben\/unsolicited-internet-traffic-from-libya March 23 2011."},{"key":"e_1_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251086.1251107"},{"key":"e_1_2_2_4_1","unstructured":"BGPmon. Internet in Egypt offline. http:\/\/bgpmon.net\/blog\/?p=450 January 28 2011.  BGPmon. Internet in Egypt offline. http:\/\/bgpmon.net\/blog\/?p=450 January 28 2011."},{"key":"e_1_2_2_5_1","unstructured":"Z. Bischof and J. Otto. Egypt and Libya Internet disconnections. http:\/\/www.aqualab.cs.northwestern.edu\/blog\/egypt-libya-peers.html March 10 2011.  Z. Bischof and J. Otto. Egypt and Libya Internet disconnections. http:\/\/www.aqualab.cs.northwestern.edu\/blog\/egypt-libya-peers.html March 10 2011."},{"key":"e_1_2_2_6_1","unstructured":"Z. Bischof and J. Otto. Japanese earthquake and P2P disruption. http:\/\/www.aqualab.cs.northwestern.edu\/blog\/sendai-earthquake-japan-peers.html March 17 2011.  Z. Bischof and J. Otto. Japanese earthquake and P2P disruption. http:\/\/www.aqualab.cs.northwestern.edu\/blog\/sendai-earthquake-japan-peers.html March 17 2011."},{"key":"e_1_2_2_7_1","unstructured":"CAIDA. UCSD Network Telescope. http:\/\/www.caida.org\/data\/passive\/network_telescope.xml 2010.  CAIDA. UCSD Network Telescope. http:\/\/www.caida.org\/data\/passive\/network_telescope.xml 2010."},{"key":"e_1_2_2_8_1","unstructured":"CAIDA. Archipelago measurement infrastructure. http:\/\/www.caida.org\/projects\/ark\/ July 28 2011.  CAIDA. Archipelago measurement infrastructure. http:\/\/www.caida.org\/projects\/ark\/ July 28 2011."},{"key":"e_1_2_2_9_1","volume-title":"ACM Fourth Workshop on Hot Topics in Networks (HotNets-IV)","author":"Casado M.","year":"2005"},{"key":"e_1_2_2_10_1","unstructured":"L. Cottrell. Internet End-to-End Performance Monitoring - Japanese Earthquake April 2011. https:\/\/confluence.slac.stanford.edu\/display\/IEPM\/JapaneseEarthquake+March+11th 2C+2011.  L. Cottrell. Internet End-to-End Performance Monitoring - Japanese Earthquake April 2011. https:\/\/confluence.slac.stanford.edu\/display\/IEPM\/JapaneseEarthquake+March+11th 2C+2011."},{"key":"e_1_2_2_11_1","unstructured":"J. Cowie. Egypt leaves the internet. http:\/\/www.renesys.com\/blog\/2011\/01\/egypt-leaves-the-internet.shtml January 27 2011.  J. Cowie. Egypt leaves the internet. http:\/\/www.renesys.com\/blog\/2011\/01\/egypt-leaves-the-internet.shtml January 27 2011."},{"key":"e_1_2_2_12_1","unstructured":"J. Cowie. Egypt Returns To The Internet. http:\/\/www.renesys.com\/blog\/2011\/02\/egypt-returns-to-the-internet.shtml Feb 2 2011.  J. Cowie. Egypt Returns To The Internet. http:\/\/www.renesys.com\/blog\/2011\/02\/egypt-returns-to-the-internet.shtml Feb 2 2011."},{"key":"e_1_2_2_13_1","unstructured":"J. Cowie. Japan quake. http:\/\/www.renesys.com\/blog\/2011\/03\/japan-quake.shtml March 11 2011.  J. Cowie. Japan quake. http:\/\/www.renesys.com\/blog\/2011\/03\/japan-quake.shtml March 11 2011."},{"key":"e_1_2_2_14_1","unstructured":"J. Cowie. Libyan disconnect. http:\/\/www.renesys.com\/blog\/2011\/02\/libyan-disconnect-1.shtml February 18 2011.  J. Cowie. Libyan disconnect. http:\/\/www.renesys.com\/blog\/2011\/02\/libyan-disconnect-1.shtml February 18 2011."},{"key":"e_1_2_2_15_1","unstructured":"J. Cowie. What Libya Learned from Egypt. http:\/\/www.renesys.com\/blog\/2011\/03\/what-libya-learned-from-egypt.shtml% March 2011.  J. Cowie. What Libya Learned from Egypt. http:\/\/www.renesys.com\/blog\/2011\/03\/what-libya-learned-from-egypt.shtml% March 2011."},{"key":"e_1_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2007.241"},{"key":"e_1_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068818"},{"key":"e_1_2_2_18_1","unstructured":"Google. Transparency report 2011. http:\/\/www.google.com\/transparencyreport\/.  Google. Transparency report 2011. http:\/\/www.google.com\/transparencyreport\/."},{"key":"e_1_2_2_19_1","unstructured":"B. Huffaker M. Fomenkov and K. Claffy. Geocompare: a comparison of public and commercial geolocation databases. Technical report May 2011. http:\/\/www.caida.org\/publications\/papers\/2011\/geocompare-tr\/.  B. Huffaker M. Fomenkov and K. Claffy. Geocompare: a comparison of public and commercial geolocation databases. Technical report May 2011. http:\/\/www.caida.org\/publications\/papers\/2011\/geocompare-tr\/."},{"key":"e_1_2_2_20_1","volume-title":"USENIX Networked Systems Design & Implementation (NSDI)","author":"Katz-Bassett E.","year":"2008"},{"key":"e_1_2_2_21_1","volume-title":"Network Flows. 18th Annual FIRST conference","author":"Kijewski P.","year":"2006"},{"key":"e_1_2_2_22_1","unstructured":"C. Labovitz. Libya Firewall Begins to Crumble? http:\/\/monkey.org\/ labovit\/blog\/\/viewpage.php?page=libya_firewall_cracks.  C. Labovitz. Libya Firewall Begins to Crumble? http:\/\/monkey.org\/ labovit\/blog\/\/viewpage.php?page=libya_firewall_cracks."},{"key":"e_1_2_2_23_1","unstructured":"C. Labovitz. Attack Severs Burma Internet. http:\/\/asert.arbornetworks.com\/2010\/11\/attac-severs-myanmar-internet\/ November 3 2010.  C. Labovitz. Attack Severs Burma Internet. http:\/\/asert.arbornetworks.com\/2010\/11\/attac-severs-myanmar-internet\/ November 3 2010."},{"key":"e_1_2_2_24_1","unstructured":"C. Labovitz. Egypt Loses the Internet. http:\/\/asert.arbornetworks.com\/2011\/01\/egypt-loses-the-internet\/ February 2011.  C. Labovitz. Egypt Loses the Internet. http:\/\/asert.arbornetworks.com\/2011\/01\/egypt-loses-the-internet\/ February 2011."},{"key":"e_1_2_2_25_1","unstructured":"C. Labovitz. Egypt Returns to the Internet. http:\/\/asert.arbornetworks.com\/2011\/02\/egypt-returns-to-the-internet\/ January 2011.  C. Labovitz. Egypt Returns to the Internet. http:\/\/asert.arbornetworks.com\/2011\/02\/egypt-returns-to-the-internet\/ January 2011."},{"key":"e_1_2_2_26_1","unstructured":"C. Labovitz. Middle East Internet Scorecard February 20 2011. http:\/\/asert.arbornetworks.com\/2011\/02\/.  C. Labovitz. Middle East Internet Scorecard February 20 2011. http:\/\/asert.arbornetworks.com\/2011\/02\/."},{"key":"e_1_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1851275.1851194"},{"key":"e_1_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2011.5935090"},{"key":"e_1_2_2_29_1","volume-title":"OSDI","author":"Madhyastha H. V.","year":"2006"},{"key":"e_1_2_2_30_1","unstructured":"N. Mathewson. Power restored to most households. http:\/\/www.stuff.co.nz\/national\/christchurch-earthquake\/4734825\/ March 5 2011.  N. Mathewson. Power restored to most households. http:\/\/www.stuff.co.nz\/national\/christchurch-earthquake\/4734825\/ March 5 2011."},{"key":"e_1_2_2_31_1","unstructured":"MaxMind. GeoLite City April 2011. http:\/\/www.maxmind.com\/app\/geolitecity.  MaxMind. GeoLite City April 2011. http:\/\/www.maxmind.com\/app\/geolitecity."},{"key":"e_1_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1219056"},{"key":"e_1_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1132026.1132027"},{"key":"e_1_2_2_34_1","unstructured":"J. Nazario. Georgia DDoS Attacks August 12 2008. http:\/\/asert.arbornetworks.com\/2008\/08\/georgia-ddos-attacks-a-quick-sum%mary-of-observations\/.  J. Nazario. Georgia DDoS Attacks August 12 2008. http:\/\/asert.arbornetworks.com\/2008\/08\/georgia-ddos-attacks-a-quick-sum%mary-of-observations\/."},{"key":"e_1_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028794"},{"key":"e_1_2_2_36_1","unstructured":"P. Porras H. Saidi and V. Yegneswaran. An Analysis of Conficker's Logic and Rendezvous Points March 2009. http:\/\/mtc.sri.com\/Conficker\/.  P. Porras H. Saidi and V. Yegneswaran. An Analysis of Conficker's Logic and Rendezvous Points March 2009. http:\/\/mtc.sri.com\/Conficker\/."},{"key":"e_1_2_2_37_1","unstructured":"M. Richtel. Egypt Cuts Off Most Internet and Cell Service. http:\/\/www.nytimes.com\/2011\/01\/29\/technology\/internet\/29cutoff.html January 28 2011.  M. Richtel. Egypt Cuts Off Most Internet and Cell Service. http:\/\/www.nytimes.com\/2011\/01\/29\/technology\/internet\/29cutoff.html January 28 2011."},{"key":"e_1_2_2_38_1","unstructured":"RIPE NCC. RIPE Atlas. http:\/\/atlas.ripe.net\/.  RIPE NCC. RIPE Atlas. http:\/\/atlas.ripe.net\/."},{"key":"e_1_2_2_39_1","unstructured":"RIPE NCC. Routing Information Service (RIS). http:\/\/www.ripe.net\/data-tools\/stats\/ris\/.  RIPE NCC. Routing Information Service (RIS). http:\/\/www.ripe.net\/data-tools\/stats\/ris\/."},{"key":"e_1_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1096536.1096546"},{"key":"e_1_2_2_41_1","unstructured":"R. W. Sinnot. Virtues of the Haversine. Sky and Telescope 68:159 1984.  R. W. Sinnot. Virtues of the Haversine. Sky and Telescope 68:159 1984."},{"key":"e_1_2_2_42_1","unstructured":"SLAC National Accelerator Laboratory. The PingER Project. http:\/\/www-iepm.slac.stanford.edu\/pinger\/site.html.  SLAC National Accelerator Laboratory. The PingER Project. http:\/\/www-iepm.slac.stanford.edu\/pinger\/site.html."},{"key":"e_1_2_2_43_1","unstructured":"University of Oregon. Routeviews project. http:\/\/www.routeviews.org.  University of Oregon. Routeviews project. http:\/\/www.routeviews.org."},{"key":"e_1_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879149"},{"key":"e_1_2_2_45_1","unstructured":"E. Zmijewski. Georgia clings to the 'net August 10 2008. http:\/\/www.renesys.com\/blog\/2008\/08\/georgia-clings-to-the-net.shtml.  E. Zmijewski. Georgia clings to the 'net August 10 2008. http:\/\/www.renesys.com\/blog\/2008\/08\/georgia-clings-to-the-net.shtml."}],"container-title":["ACM SIGCOMM Computer Communication Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2096149.2096154","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2096149.2096154","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:54:34Z","timestamp":1750240474000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2096149.2096154"}},"subtitle":["using malware pollution to analyze the impact of political and geophysical events on the internet"],"short-title":[],"issued":{"date-parts":[[2012,1,16]]},"references-count":45,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2012,1,16]]}},"alternative-id":["10.1145\/2096149.2096154"],"URL":"https:\/\/doi.org\/10.1145\/2096149.2096154","relation":{},"ISSN":["0146-4833"],"issn-type":[{"value":"0146-4833","type":"print"}],"subject":[],"published":{"date-parts":[[2012,1,16]]},"assertion":[{"value":"2012-01-16","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}